Surveying 134 XR motion-privacy papers, it maps modalities, attacks, and defenses, finally treating headsets as data sponges.